{ "ok": true, "slug": "ac.il-2026-03-24", "stats": { "subs": 43074, "all": 43074, "resolved": 37518, "live": 215, "takeover": 44, "juicy": 217, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 1, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/ac.il-2026-03-24", "takeover_candidates": [ "askme.hit.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mboticalb-1730953931.eu-central-1.elb.amazonaws.com\u001b[0m]", "bgn.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3umwyr050m8gf.cloudfront.net\u001b[0m]", "bgn.test.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ljythravrjf.cloudfront.net\u001b[0m]", "bog2018.technion.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mbog2018.technion.ac.il.herokudns.com\u001b[0m]", "bot.colman.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mboticalb-1730953931.eu-central-1.elb.amazonaws.com\u001b[0m]", "cdn2.gordon.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkibb70s0q6lt.cloudfront.net\u001b[0m]", "chatbtest.colman.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mboticatestlb-1079126733.eu-central-1.elb.amazonaws.com\u001b[0m]", "desertdata.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3umwyr050m8gf.cloudfront.net\u001b[0m]", "desertdata.test.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ljythravrjf.cloudfront.net\u001b[0m]", "elearn.iac.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32miac-loadbalancer-1859910523.il-central-1.elb.amazonaws.com\u001b[0m]", "futurefit.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "gip.cs.technion.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-3-121-23-107.eu-central-1.compute.amazonaws.com\u001b[0m]", "graphic-assets.hit.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md2jodpuu5lyexw.cloudfront.net\u001b[0m]", "guyitzchakov.haifa.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "ichsa.sise.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32myossioren.github.io\u001b[0m]", "idx.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mitaylaniado.github.io\u001b[0m]", "maarag.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32makariv.github.io\u001b[0m]", "maintenance.braude.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md22fnc5q9k3syr.cloudfront.net\u001b[0m]", "mdesgrad2021.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "mdesgrad2022.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "mdesgrad2023.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "moodle.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oiyca35g17dj.cloudfront.net\u001b[0m]", "moodle2.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oiyca35g17dj.cloudfront.net\u001b[0m]", "moodlevpl2.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oiyca35g17dj.cloudfront.net\u001b[0m]", "mussel.haifa.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mmatanmus.github.io\u001b[0m]", "my.iac.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32miac-loadbalancer-1859910523.il-central-1.elb.amazonaws.com\u001b[0m]", "opsrv.apps.openu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mdufj49sxofnwd.cloudfront.net\u001b[0m]", "orenlab.sise.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32myossioren.github.io\u001b[0m]", "ourtanakh.herzog.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "portal.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3umwyr050m8gf.cloudfront.net\u001b[0m]", "portal.test.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ljythravrjf.cloudfront.net\u001b[0m]", "sel.sise.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32msocially-embedded-lab.github.io\u001b[0m]", "sheilta.apps.openu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md2c62u21f0x271.cloudfront.net\u001b[0m]", "shop-play.cet.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]", "shop.cet.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]", "sso.apps.openu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md2qp3b1r4c2quh.cloudfront.net\u001b[0m]", "test.askme.hit.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mboticalb-1730953931.eu-central-1.elb.amazonaws.com\u001b[0m]", "umbraco.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-bgu-main-site-prod-back-alb-835169518.il-central-1.elb.amazonaws.com\u001b[0m]", "ummedia.bgu.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32md2chaqteaoj1zk.cloudfront.net\u001b[0m]", "www.iac.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32miac-loadbalancer-1859910523.il-central-1.elb.amazonaws.com\u001b[0m]", "www.mdesgrad.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "www.mdesgrad2023.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "www.xport.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "xport.bezalel.ac.il [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]" ], "takeover_v4": { "domain": "ac.il", "version": 5, "generated_at": "2026-03-24T11:24:59.238Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 6, "kept_strict": 1, "llm_review_pool": 0, "dropped_noise": 5, "deep_skipped_below_pool": 5 }, "candidates": [ { "host": "moodlevpl2.bgu.ac.il", "cname": "d3oiyca35g17dj.cloudfront.net", "status": 404, "title": "Not found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 54, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 không đủ để xác định resource chưa được gắn tenant. Có thể là endpoint chưa cấu hình hoặc bị xóa, nhưng không rõ ràng để claim.", "llm_labeled_at": "2026-03-24T11:25:04.297Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/moodlevpl2.bgu.ac.il\/", "http_status": 404, "title_snippet": "Not found", "verify_error": null, "webhook_note": "webhook_http_200", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": false, "telegram_error": "filtered:llm_priority_low" } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "moodlevpl2.bgu.ac.il" ], "batch_sources": [ "strict" ], "promote_revived": true, "labeled_at": "2026-03-24T11:25:04.297Z", "usage": { "prompt_tokens": 391, "completion_tokens": 107, "total_tokens": 498, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 263 } }, "v5": { "processed_at": "2026-03-24T11:25:04.344Z", "auto_claim_enabled": true, "telegram_enabled": true, "slug": "ac.il-2026-03-24" } } }